Saad Ibn-Ezzoubayr
c89d1879bf
- Story 1.1: Permission enum, config, AuthorizesPermissions & HasWorkspaceScope traits, member→worker migration - Story 1.2: Team page with member list, invitation system with queued email - Story 1.3: Role assignment (Manager/Worker) and member removal with activity logging - Story 1.4: Owner-only permission toggle matrix for Managers (manage team, view logs, configure portal) - Story 1.5: Role-based access enforcement — Workers see only assigned declarations/clients, sidebar scoping - Story 1.6: Workspace switcher dropdown for multi-workspace users with session-based switching - 83 new/modified files, 182 tests passing with zero regressions Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
98 lines
3.4 KiB
PHP
98 lines
3.4 KiB
PHP
<?php
|
|
|
|
use App\Models\Client;
|
|
use App\Models\Declaration;
|
|
use App\Models\User;
|
|
use App\Models\Workspace;
|
|
use App\Notifications\DeclarationMentionNotification;
|
|
use Illuminate\Support\Facades\Notification;
|
|
|
|
function setupMentionScenario(string $role = 'owner'): array
|
|
{
|
|
$sender = User::factory()->create();
|
|
$target = User::factory()->create();
|
|
$workspace = Workspace::factory()->create();
|
|
$workspace->users()->attach($sender, ['role' => $role]);
|
|
$workspace->users()->attach($target, ['role' => 'worker']);
|
|
|
|
$client = Client::factory()->create(['workspace_id' => $workspace->id]);
|
|
$declaration = Declaration::factory()->create([
|
|
'workspace_id' => $workspace->id,
|
|
'client_id' => $client->id,
|
|
]);
|
|
|
|
return [$sender, $target, $workspace, $declaration];
|
|
}
|
|
|
|
test('owner can mention a workspace user', function () {
|
|
Notification::fake();
|
|
[$sender, $target, $workspace, $declaration] = setupMentionScenario('owner');
|
|
session(['current_workspace_id' => $workspace->id]);
|
|
|
|
$response = $this->actingAs($sender)->post(route('declarations.mentions.store', $declaration), [
|
|
'user_id' => $target->id,
|
|
'message' => 'Please check this declaration.',
|
|
]);
|
|
|
|
$response->assertRedirect();
|
|
Notification::assertSentTo($target, DeclarationMentionNotification::class);
|
|
});
|
|
|
|
test('manager can mention a workspace user', function () {
|
|
Notification::fake();
|
|
[$sender, $target, $workspace, $declaration] = setupMentionScenario('manager');
|
|
session(['current_workspace_id' => $workspace->id]);
|
|
|
|
$response = $this->actingAs($sender)->post(route('declarations.mentions.store', $declaration), [
|
|
'user_id' => $target->id,
|
|
'message' => 'Please check this declaration.',
|
|
]);
|
|
|
|
$response->assertRedirect();
|
|
Notification::assertSentTo($target, DeclarationMentionNotification::class);
|
|
});
|
|
|
|
test('worker cannot mention a workspace user', function () {
|
|
Notification::fake();
|
|
[$sender, $target, $workspace, $declaration] = setupMentionScenario('worker');
|
|
session(['current_workspace_id' => $workspace->id]);
|
|
|
|
$response = $this->actingAs($sender)->post(route('declarations.mentions.store', $declaration), [
|
|
'user_id' => $target->id,
|
|
'message' => 'Please check this declaration.',
|
|
]);
|
|
|
|
$response->assertForbidden();
|
|
Notification::assertNothingSent();
|
|
});
|
|
|
|
test('cannot mention user from another workspace', function () {
|
|
Notification::fake();
|
|
[$sender, , $workspace, $declaration] = setupMentionScenario('owner');
|
|
$outsider = User::factory()->create();
|
|
session(['current_workspace_id' => $workspace->id]);
|
|
|
|
$response = $this->actingAs($sender)->post(route('declarations.mentions.store', $declaration), [
|
|
'user_id' => $outsider->id,
|
|
'message' => 'Hello',
|
|
]);
|
|
|
|
$response->assertSessionHasErrors('user_id');
|
|
Notification::assertNothingSent();
|
|
});
|
|
|
|
test('notification is persisted in database', function () {
|
|
[$sender, $target, $workspace, $declaration] = setupMentionScenario('owner');
|
|
session(['current_workspace_id' => $workspace->id]);
|
|
|
|
$this->actingAs($sender)->post(route('declarations.mentions.store', $declaration), [
|
|
'user_id' => $target->id,
|
|
'message' => 'Check this.',
|
|
]);
|
|
|
|
expect($target->notifications()->count())->toBe(1);
|
|
$notif = $target->notifications()->first();
|
|
expect($notif->data['declaration_id'])->toBe($declaration->id);
|
|
expect($notif->data['message'])->toBe('Check this.');
|
|
});
|